andrewsun2898

Results 2 issues of andrewsun2898

Can we get a new release so we can get recent changes into vendored packages? Thanks!

sha1 is completely cryptographically unsafe, we should consider removing support from it in our shasum package and encourage users to use one of the other sha function alternatives.